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REMARKS 

Claim 2 had previously been canceled. Applicants cancel claims 3, 7, and 1 8, Claims 1, 
4-6, 8-17, and 19-28 remaining pending in tie application. Applicants amend claims 1 and 4 to 
incorporate the features of canceled claim 3, and amend claims 5 and 6 to incorporate features of 
canceled claims 7 and 18, respectively. Applicants also amend claims 8, 17, 19, 23 and 27 for 
proper dependency. No new matter has been added. 

The Examiner objected lo claims 1 and 4-6 for a number of apparent informalities. 
Applicants amend claims 1 and 4-6 in accordance with the Examiner's suggestions, and 
respectfLLlly request that the Exairiiner withdraw the objection. 

Claims 1, 3-7, 10-14, 17-18, 21-25, 27-28 stand rejected imder 35 U.S.C. § 103(a) as 
being unpatentable over U,S. Patent No. 5,818,936 to Mashavekhi in view of U.S. Patent No. 
5 ,761,309 to Ohashi et al. and further in view of U.S. Patent No. 6,981,147 to Hamann et al. : 
and claims 8-9, 15-16, 19-20, and 26 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Mashavekhi in view of Qha^hi et al.. further in view of HamanrnetaL, and 
further in view of US. Patent No. 5,892,828 to Perhnan . Applicants amend clauns 1 and 4-6 to 
incorporate features of claim 1, 7, and 18, respectively, in a good faith effort to further clarify the 
invention as distuiguished from the cited references. Applicants respectfully traverse the 
rejections. 

The Examiner cited new reference Hamann et al. as alleged disclosure of **grouping of 
certificates.*' The cited portions of Hamann et al. only describe, however, a group certificate in 
the context of a certificate that groups together "keys to be issued at the same time for the same 
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user by the same certificaUon instance." Please see, e.g.. the abstract of Hauiaim et al. As sucli, 

the "group certificate" for a user's keys described in Hamanii et al. does not disclose the claimed 
group certificate for a group to which a user belongs. Indeed, Hamann et al. only describe a 
certificate based on a pubhc key, and an invention directed to simplifying the process and 
reducing the needed storage by sharing the same items among a plurality of certificates for the 
same user by the same certification instance when the plurality of certificates include the same 
items. 

TIius, even assuming, that it would have been obvious to one skilled in the art to combine 
Mashyekhi, Ohashi et al., and Hamann etal .. the combination would have, at most, suggested 
grouping together "keys to be issued at the same time for the same user by the same certification 
mstance," as described in Hamann et al. Such a combination would still have failed to disclose 
or suggest the claimed feature of a group certificate based on the information on the group to 
which the related user belongs and whose membership to which is thereby authenticated. 

Furthermore, Hamann et al. only describe, in the "Background of the Invention," the use 
of a hash before an encryption process as a possible way to reduce the amount of data. The 
combination of references, therefore, further fail to disclose or suggest the claimed feature of the 
cryptographic fimction being a hash function. 

Mashavekhi also only describes public key encryption where an inquiry to an 
authentication service is performed every time authentication is requested ("on demand") by an 
^plication program. And the described 'Tceycbain" is thereby supplied fix>m the authenticarion 
service to the application program. Mashavekhi. thus, does not disclose or suggest the claimed 
indirect authentication with identical secret information for identical groups. Furthermore, the 
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portion ofMashayekhi cited by the Examiner in rgecting the claimed feature of the ^'^^ ""^^^ 
cryptographic fimction being a hash function (col. 2, lines 5-8) only relates to one instance of 
extracting an encryption key using a hash function, the key is then used in a separate 
cryptographic function. Mashayekhi, therefore, fails to suggest the claimed feature of using a 
hash function as cryptographic function. 

hideed, Hamann ct aL , Mashayekhi, and Ohashietal. all fail to disclose or suggest the 
claimed feature of using a liash function as the cryptographic functioT). 

As such, even assuming, arguendo, that it would have been obvious to one skilled in the 
art to combine Hamann et aL, Mashavekhi. and QhasM ct aL. the combination would still have 
failed to disclose or suggest. 



"[a] system of distributed group management for indirectly 
authentica ting membership of a user in a group in order to manage 
security for a chent on a client side and a server for executing a 
remote processing request from the client side under a 
predetermined autliorization assigned for every group, provided 
with 

a group certificate issuing apparatus for issuing a group 
certificate on the client side based on original group information 
including the name of the group to which the related user belongs 
when there is said remote processing request and 

a group certificate verification unit for verifying a 
legitimacy of said group certificate transmitted from the client side 
in said server, wherein 

said group certificate issuing apparatus adds an issuance 
side processed value obtained bv encrvp ti ng the information of the 
original g roup information by a crvptosravhic function to the 
original gro up infArmfltinn and defines this as the group certificate, 

said group certificate verification imit processes part of the 
information included in the received group certificate by an 
identical cruutoi^aDhic function to obtain a verification side 
processed value and performs said authentication by confinning 
tliat said issuance side processed value and said verification side 
processed value coincide. 
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said group certificate iss uing app arat us includes fir^t ^etcrP^t 

mfonnatiQn assigned to said g roups in said Qrig inal prnnp 
infomaation and performs the processinp; by said crvptoeraphic 
function, said firs t secret infomiation being held only by saiH 
RTOUp certificate issuing apparatus. 

said group certificate ve rification unit includes second 
secret info rmation assigned to the groups in part of information 
includ ed in said received group certificate and performs the 
processing bv said rr yj^to^ranhic function, said second secret 
information being held only by said group cenificate verificaHnn 
unit 

said first s ecret information and said second secret 
information are identical secret information for id entical groups 
and ~~ ^ ' 

said crypto graphic function is a hash fimctiony as recited 
in claim L (Emphasis added) 

Accordingly, Applicants respectfully submit that claim I is patentable over Mashavekhi . 
Qhashi eta)., and Hamann et al,, separately and in combination, for at least the above-stated 
reasons. Claims 4-6 incorporate features that correspond to those of claim 1 cited above, and 
are, therefore, together with claims 10-14, 17, 21-25, 27-28 dependent therefrom, respectively, 
patentable over the cited references for at least the same reasons. 

The Examiner relied upon Perlman to specifically address the additional features recited 
in dependent claims 8-9, 15-16. 19-20, and 26, As such, the combination of this reference, even 
if obvious to one skilled in the art at the time the claimed invention was made, would still have 
failed to cure the above-described deficiencies of Mashavekhi. Qhashi et al.. and Hamann et al. 
Accordingly, Applicants respectfully submit that claims 8-9, 15-16, 19-20, and 26 are patentable 
over the cited references for at least the above-stated reasons with regard to their respective base 
claims 5 and 6, firom which they depend. 

The above statements on the disclosure in the cited references represent the present 
opinions of the undersigned attorney. The Examiner is respectfully requested to specifically 
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indicate those portions of the respective reference that provide the basis for a view contrary to 
any of the above-stated opinions. 

In view of the remarks set forth above» this apphcation is in condition for allowance 
which action is respectfully requested. However, if for any reason the Examiner should consider 
this application not to be in condition for allowance, the Examiner is respectfully requested to 
telephone the undersigned attomey at the number listed below prior to issuing a further Action. 

Any fee due with this paper may be charged to Deposit Accoimt No. 50-1290. 

Res^ctfully snbmitted. 




Dextcrl: Chang 
Reg. No, 44,071 
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